[BROOKLYN-587] GCE credentials in catalog location not usable

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 0.12.0
• Labels: google-compute-engine jclouds

Environment

• Apache Brooklyn server 0.12.0
• Apache Brooklyn CLI 0.12.0

Blueprint which works fine.

Attached:

• correct working blueprint (tomcat.yml)
• not working combi of catalog item (gcp-asia-southeast1-b-0.0.5.bom) and blueprint (tomcat-ext-location.yml)

• Assignee: Unassigned
• Reporter: Robin Huiser
• Created: 16/May/18 14:32
• Updated: 25/May/18 12:27

Description

Using a catalog based jclouds:google-compute-engine location within a blueprint results into error "Error resolving template – not authorized"

2018-05-16T13:57:07,502 WARN  128 o.a.b.l.j.JcloudsLocation [ger-QPzhoimG-986]  Error resolving template -- not authorized (rethrowing: org.jclouds.rest.AuthorizationException: {
"error": {
"errors": [
{
"domain": "global",
"reason": "forbidden",
"message": "Required 'compute.projects.get' permission for 'projects/onyx-badge-196310'"
}
],
"code": 403,
"message": "Required 'compute.projects.get' permission for 'projects/onyx-badge-196310'"
}
}
); template is: null

... while using the same credentials in the blueprint works fine.